Permissions
Grafti requests only the minimum Chrome extension permissions needed for anchored commenting and account sign-in.
activeTabfor reading visible page content after explicit user interaction.scriptingfor injecting and running the overlay renderer where needed.storagefor local settings, local cache metadata, and session persistence.identityfor browser-mediated auth flows (magic link and Google OAuth).